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Top Stories 

• A BNSF Railway train derailed July 3 in Montana, damaging a shipment of Boeing 737 
fuselages and other aircraft components being shipped from Wichita, Kansas, to Seattle. - 
Reuters (See item 14 ) 

• A power outage caused over 1 million gallons of untreated wastewater to overflow from 
the City of Pflugerville Wastewater Treatment Facility into Gilleland Creek, prompting 
authorities to issue a boil water notice to residents within half a mile of the spill site and 1 
mile downstream. - KVUE 24Austin (See item 18) 

• Officials believe a lightning strike was to blame for a 4-alarm fire that broke out July 4 at 
an apartment building in the East Flatbush neighborhood of New York City, displacing 150 
residents. - News 12 Brooklyn (See item 35) 

• Police are searching for a gunman that opened fire into a crowd at the Houston Caribbean 
Festival July 5, injuring four people, while two additional individuals were injured in a 
stampede for the exits that followed the incident. - Reuters (See item 38) 
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Energy Sector 



1. July 7, WFMY 2 Greensboro - (North Carolina; Virginia) Duke Energy says coal ash 
cleanup at site near Eden is complete. Duke Energy released a statement July 3 
announcing the cleanup from a February coal ash spill into the Dan River near Eden, 
North Carolina, is complete. More than 2,000 tons of coal ash and sediment have been 
removed to date and crews continue to clean up the residue that traveled to Danville, 
Virginia. 

Source: http://www.wfmvnews2.com/storv/news/local/2014/07/07/coal-ash-cleanup- 
eden-complete/ 12279423/ 

2. July 4, Associated Press - (Pennsylvania) Severe storms leave 70K without power in 
Pa. About 70,000 Pennsylvania utility customers, including about 64,000 PECO 
customers in Chester County, were left without power July 4 due to powerful 
thunderstorms that moved across the State. 

Source: http://www.thecourierexpress.com/news/state/article f7f9d59d-7dl 6-5664- 
90d4-dbe7494e3994.html 

3. July 4, Associated Press - (Pennsylvania) Coal, gas drilling waste plant closes, leaves 
mess. The Pennsylvania Department of Environmental Protection (DEP) initiated 
cleanup efforts to contain acid mine water and sludge allegedly left by the Tunnelton 
Liquids Company in Saltsburg after the wastewater treatment company closed July 4. 
The DEP stated that waste material was accumulating and could overflow into the 
Conemaugh River if left untreated. 

Source: 

http://www.poconorecord.com/apps/pbcs.dll/article?AID=/20140704/NEWS/14070989 
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Chemical Industry Sector 

4. July 7, WXIA 11 Atlanta - (Georgia) Roads reopen after chemical reaction release in 
Dalton. One person was decontaminated and transported to an Augusta burn center 
after inhaling a chemical that was released at an MFG Chemical facility in Dalton July 
7. 

Source: http://www.llalive.com/storv/news/local/2014/07/07/dalton-chemical- 
explosion/12281755/ 

5. July 6, WB1R 10 Knoxville - (Tennessee) East Tennessee fireworks store a loss after 
fire. The Fireworks Superstore in Campbell County was deemed a total loss following 
a July 6 fire that caused fireworks to ignite and the building to bum down. 

Source: http://www.tennessean.com/story/news/local/2014/07/06/east-tennessee- 
fireworks-engulfed-in-flames/ 122721 49/ 

6. July 3, Reuters - (Texas) One dead, three badly hurt in Texas school fireworks 

explosion. A person licensed to handle fireworks was killed and three others injured 
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July 3 when a semi-truck carrying fireworks exploded while crews unloaded the truck 
in preparation for a fireworks display at the Comanche High School football stadium. 
Source: http://www.reuters.com/article/2014/07/Q3/us-usa-texas-fireworks- 



idUSKBN0F82 1020140703 
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Nuclear Reactors, Materials, and Waste Sector 

7. July 4, World Nuclear News - (Kansas) White finding for Wolf Creek violation. The 
U.S. Nuclear Regulatory Commission issued a ‘white’ finding to the Wolf Creek 
nuclear power plant in Kansas for a software error that would have overestimated 
iodine emissions in the event of an accident. The low-to-moderate significance 
violation was identified in a November 2013 inspection and was found to have been 
present from November 2012. 

Source: http://www.world-nuclear-news.org/RS-White-finding-for-Wolf-Creek- 
violation-0407 1 47 .html 

8. July 3, Associated Press - (New Mexico) US laboratory admits violating nuke- waste 
permit. The Los Alamos National Laboratory released a letter to the New Mexico 
Environment Department July 3 stating that an internal probe had found several 
violations of its Hazardous Waste Facility Permit, including failing to follow proper 
procedures in the packing of waste that later reacted with organic litter and caused a 
radiation release at the Waste Isolation Pilot Plant. 

Source: http://www.miamiherald.com/2014/07/03/4217019/us-laboratorv-admits- 
violating.html 

[ Return to top ] 

Critical Manufacturing Sector 

9. July 7, Securityweek - (International) Researchers hack smartphone-controlled LED 
light bulbs. Researchers with Context Information Security demonstrated how WiFi- 
enabled FED light bulbs manufactured by FIFX can be compromised and controlled 
remotely by an attacker. The researchers found that most wireless communication 
protocols were unencrypted, allowing them to inject traffic and control the light bulbs. 
Source: http://www.securitvweek.com/researchers-hack-smartphone-controlled-led- 
light-bulbs 

For another story, see item 14 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

10. July 7, Securityweek - (International) Researchers find vulnerability in internal 
PayPal portal. Vulnerability Lab researchers disclosed and published a proof-of- 
concept for a vulnerability in an “Ethernet portal” used by PayPal employees that could 
have been used by attackers to gain access to personal and financial information of 
customers or to hijack accounts. The vulnerability was reported in February 2013, fixed 
around December 2013, and cleared for publication July 4. 

Source: http://www.securitvweek.com/researchers-find-vulnerabilitv-intemal-paypal- 
portal 
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Transportation Systems Sector 

11. July 7, Washington Post- (Washington) Southbound 1-295 lanes re-open after 
accident. A portion of 1-295 southbound near South Capitol Street in Maryland was 
shut down for around 3 hours July 7 due to an accident involving an overturned dump 
truck. 

Source: http://www.washingtonpost.com/blogs/dr-gridlock/wp/2014/07/07/accident- 
closes-southbound-lanes-of-i-295/ 

12. July 6, Temecula Patch - (California) Three people killed in plane crash near Lake 
Elsinore. Three people were killed when their small plane crashed near Lake Elsinore 
July 6. The crash also caused a small fire, which was contained to less than a half-acre. 
Source: http://temecula.patch.eom/groups/police-and-fire/p/three-people -killed-in- 
plane-crash-near-lake-elsinore8 1210 

13. July 5, Associated Press; St. Louis Post-Dispatch - (Missouri) Flooding closes Mo 79 
south of Hannibal and Louisiana. Rising flood waters on the Mississippi River closed 
Missouri State Highway 79 south of Louisiana, Missouri, July 4. Dam 24 in Clarksville 
was also closed to navigation July 4 due to the high waters. 

Source: http://www.stltoday.com/news/local/metro/flooding-closes-mo-south-of- 
hannibal-and-louisiana/article 924()dd9e-fbe9-50d l-b775-8fa6cd789555.html 

14. July 5, Reuters - (Montana) Boeing 737 fuselages damaged in train derailment. A 

BNSF Railway train derailed July 3, damaging a shipment of Boeing 737 fuselages and 
other aircraft components being shipped from Wichita, Kansas, to Seattle. Boeing 
dispatched personnel to the scene to evaluate the damage to the fuselages and 
components. 

Source: https://finance.yahoo.com/news/boeing-737-fuselages-damaged-train- 
183402681.html 



[ Return to top ] 



-4- 



Food and Agriculture Sector 



15. July 4, U.S. Department of Agriculture - (Nevada) Nevada firm recalls chicken 

products that were produced without fully implementing a Ready-To-Eat HACCP 
Plan. Las Vegas-based Kanani Foods recalled approximately 59 pounds of chicken 
products due to the possibility they were not produced under a fully implemented 
Ready-To-Eat Hazard Analysis & Critical Control Points (HACCP) plan. The issue 
was discovered June 30 when an FSIS inspection revealed the company had no records 
to prove that the HACCP plan was implemented or validated, and there was no 
assurance they products were safe for consumption. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/2014/recall-045-2014-release 



16. July 4, U.S. Department of Agriculture - (National) California firm recalls chicken 
products due to possible Salmonella Heidelberg contamination. The Food Safety 
and Inspection Service (FSIS) announced July 4 that Foster Farms of Livingston, 
California, issued a recall for an undetermined amount of chicken products due to 
possible Salmonella Heidelberg contamination. The recall was requested by FSIS after 
an investigation in conjunction with the Centers for Disease Control and Prevention 
revealed a link between a June 2014 illness and consumption of the company’s chicken 
breast products. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/2014/recall-044-20 14-release 



17. July 3, U.S. Department of Agriculture - (Texas) Texas firm recalls beef products 
due to possible foreign matter contamination. The Food Safety and Inspection 
Service announced July 3 that San Antonio-based HEB Meat Processing (HEB) 
recalled approximately 75,465 pounds of fresh beef products due to the possibility they 
may contain foreign, metal materials due to a failed bearing in auger machinery. The 
metal shavings were found in the products when HEB employees used a metal 
detection system to investigate a consumer’s report of finding metal in the product 
during an in-store sampling. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/20 1 4/recall-043-20 14-release 



For another story, see item 24 
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Water and Wastewater Systems Sector 

18. July 7, KVUE 24 Austin - (Texas) Officials: More than 1 million gallons of 
wastewater spilled into Pflugerville creek. A power outage caused over 1 million 
gallons of untreated wastewater to overflow from the City of Pflugerville Wastewater 
Treatment Facility into Gilleland Creek, prompting authorities to issue a boil water 
notice to residents within half a mile of the spill site and 1 mile downstream. 

Source: http://www.kvue.com/story/news/local/2014/07/07/boil-water- 
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pflugerville/12295279/ 



19. July 5, Newark Star-Ledger - (New Jersey) Boil-water advisory continues in East 
Brunswick. A break in a water main that connects North Brunswick to East Brunswick 
prompted authorities to issue a boil water notice July 3 for East Brunswick residents 
due to the potential for contamination. Authorities estimated that the boil water notice 
would be lifted July 6. 

Source: http://www.ni.com/middlesex/index.ssf/2014/07/boil- 
water advisory continues in east brunswick.html 

For another story, see item 3 
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Healthcare and Public Health Sector 

Nothing to report 
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Government Facilities Sector 

20. July 6, KCNC 4 Denver - (Colorado) 3 injured in apparent explosion at Cherry 
Creek State Park Marina. Authorities investigated after a possible vapor explosion on 
the back of boat at the Yacht Club at Cherry Creek State Park in Greenwood Village 
injured three people July 6. 

Source: http://denver.cbslocal.com/2014/07/06/3-iniured-in-apparent-explosion-at- 
cherry-creek-state-park-marina/ 

21. July 5, Reuters - (Massachusetts) Threatening call prompts evacuations, bomb 
search at Harvard. Four buildings, including the Science Center, on the Harvard 
University campus in Cambridge were evacuated July 5 after a bomb threat was called 
in by a man claiming to have an assault rifle on campus. Authorities searched and 
cleared the facilities to reopen after no bomb was found. 

Source: http://www.reuters.com/article/2014/07/05/us-usa-university-massachusetts- 
idU S KBN0FA0QE20 1 407 05 



For additional stories, see items 6 and 29 
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Emergency Services Sector 

22. July 7, WQAD 8 Moline - (Iowa) Pursuit ends with Iowa escapee captured near 
Maquoketa. An escaped Jackson County jail inmate was charged on several counts 
after he was captured driving a stolen vehicle in Maquoketa, Iowa, July 5 after escaping 
the custody of a Jackson County deputy while being returned to jail after a court 
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appearance June 16. 

Source: http://wqad.com/2014/07/06/iowa-inmate-captured-after-found-driving-stolen- 
vehicle-police-say/ 

23. July 4, Lima News - (Ohio) Mercer County telephone service, including 911, 
disrupted. The Mercer County Sheriff reported July 3 that phone lines throughout the 
county were down, rendering cell phone service unavailable and causing a 9-1-1 
service disruption. Residents were given a separate number to call from a landline in 
case of emergency. 

Source: http://www.limaohio.com/news/news/1488168/Mercer-County-telephone- 
service-including-9 1 1 -disrupted 

24. July 4, Food Poisoning Bulletin - (Michigan) Quarantine at Jackson, MI Parnall 
prison as more sickened. At least 150 people were reported sick at the Parnall 
Correctional Facility in Jackson, Michigan, July 4, increasing initial reports of illness 
by 120 cases and prompting a partial quarantine of sick inmates. Unsanitary food 
products provided by Aramark, a private food service provider, were believed to be the 
origin of the outbreak. 

Source: http://foodpoisoningbulletin.com/2014/quarantine-at-iackson-mi-parnall- 
prison-as-more-sickened/ 

25. July 3, KTVU 2 Oakland - (California) Power outage impacts Santa Clara County 
Communication Center. 9-1-1 calls and emergency services dispatch were disrupted 
in Santa Clara County July 2 after power was lost at the Santa Clara County 
Communications Center. Emergency calls were rerouted during the outage and power 
was restored July 3. 

Source: http://www.ktvu.com/news/news/local/power-outage-impacts-santa-clara- 
county-communicat/ngYYr/ 
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Information Technology Sector 

26. July 7, IDG News Service - (International) Attack on Dailymotion redirected visitors 
to exploits. Symantec researchers reported that beginning June 28 attackers injected 
malicious code into video-sharing Web site Dailymotion.com which redirected visitors 
to a malicious Web site hosting the Sweet Orange Exploit Kit. Computers compromised 
by the exploit kit were then infected with the Trojan.Adclicker artificial traffic 
generator malware. 

Source: http://www.networkworld.com/article/2451063/securitv/attack-on-dailymotion- 
redirected-visitors-to-exploits.html 

27. July 5, Softpedia - (International) 4th of July malware campaign targets travel 
websites. Researchers with Proofpoint identified several travel Web sites being 
compromised and altered to serve an unknown exploit kit to visitors. The attacks were 
timed to take advantage of the 4th of July holiday and feature an exploit kit that was 
detected by only four antivirus engines on VirusTotal. 



- 7 - 



Source: http://news.softpedia.com/news/4th-of-Julv-Malware-Campaign-Targets- 
Travel-Websites-449639.shtml 



28. July 3, Securityweek - (International) Security vulnerabilities fixed with release of 
Python 2.7.8. The Python Software Foundation released Python 2.7.8 July 1, closing 
three security vulnerabilities. 

Source: http://www.securityweek.com/security-vulnerabilities-fixed-release-python- 
278 



29. July 3, Securityweek - (International) ‘CosmicDuke’ malware emerges as update to 
MiniDuke espionage trojan. Researchers with F-Secure and Kaspersky Lab identified 
a new version of the MiniDuke information-stealing malware dubbed CosmicDuke that 
shares code with the Cosmu malware. The researchers stated that the group behind the 
CosmicDuke malware appears to be the same group that used the MiniDuke malware to 
steal information from European governments in 2013. 

Source: http://www.securityweek.com/cosmicduke-malware-emerges-update- 
miniduke-espionage-troj an 

30. July 3, The Register - (International) Your Android phone is a SNITCH: Wi-Fi bug 
makes you easy to track. Researchers with the Electronic Frontier Foundation found 
that Android devices running Android 3.1 and later may disclose the 15 most recent 
WiFi networks a user connected to, potentially compromising privacy by allowing 
attackers to discern a user’s movements or identity. The issue is present on some 
Android devices but not others, and is also present on all OS X laptops and some 
Windows 7 laptops. 

Source: http://www.theregister.co.uk/2014/07/03/eff android wifi tracking bug/ 

31. July 3, The Register - (International) You CAN’T bust into our login app’s password 
vault, insists Roboform. RoboForm announced that it adjusted security for the mobile 
version of its password manager after a security researcher reported that the security of 
the RoboForm mobile app for Android and iOS can be bypassed by deleting a line in 
the app’s preferences file. The researcher also claimed that the way the private key is 
shared with parent company Siber System’s servers could also compromise security. 
Source: http://www.theregister.co.uk/2014/07/03/roboform security worries/ 

32. July 3, Softpedia - (International) Bitcoin phishing ads present in Bing search 
engine. Netcraft researchers found two links to phishing sites targeting Bitcoin users in 
Bing search result ads. One malicious ad linked to a phishing page, while the other was 
non-functional due to the attackers using an incorrect top-level domain in the address. 
Source: http://news.softpedia.com/news/Bitcoin-Phishing-Present-in-Bing- 
Search-Engine-449424.shtml 

For another story, see item 9 
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Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to Report 
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Commercial Facilities Sector 

33. July 7, Beaver County Times - (Pennsylvania) Fire consumes three buildings in 
Pennsylvania. One person was rescued from a commercial building in Ambridge July 
6 after a fire broke out in a vacant ice cream shop and spread to an adjacent tanning 
salon and candy store. Authorities are investigating the blaze that was contained several 
hours later. 

Source: http://www.firehouse.com/news/11553104/harmony-township-pa-firefighter- 
saves-man-from-buming-building 

34. July 5, WSET 13 Lynchburg - (Virginia) Roanoke apartment fire displaces more 
than 70 residents. More than 70 residents were displaced from the Camden Court 
apartment complex following a July 5 fire that broke out inside a laundry room of the 
building. Damage was estimated to total $22,500. 

Source: http://www.wset.com/storv/25947349/roanoke-apartment-fire-displaces-more- 
than-70-residents 

35. July 5, News 12 Brooklyn - (New York) Lightning strike sparks 4-alarm fire on 
Rockaway Parkway in East Flatbush. Officials believe a lightning strike was to 
blame for a 4-alarm fire that broke out July 4 at an apartment building in the East 
Flatbush neighborhood of New York City. More than 150 residents were displaced by 
the blaze. 

Source: http://brooklvn.newsl2.com/news/lightning-strike-sparks-fire-in-east-flatbush- 
1 .8666460?firstfree=yes 

36. July 5, KRNV 4 Reno - (Nevada) Crews douse apartment fire in Sparks, 31 people 
displaced. A July 5 fire at the Marina Garden Apartments in Sparks, Nevada, displaced 
31 residents and damaged 3 units and part of the structure’s attic. One firefighter was 
transported to an area hospital for symptoms related to heat exhaustion. 

Source: http://www.mynews4.com/news/local/storv/Crews-douse-apartment-fire-in- 
Sparks-31-people/jgwkki UiUevasOUKVhF3A.cspx 
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37. July 5, WBTV 5 Charlotte - (North Carolina) Fire displaces 48 people at apartment 
complex near UNC Charlotte. Twelve units were damaged and 48 residents were 
displaced by a 3-alarm fire that broke out at an apartment complex in Charlotte July 5. 
The cause of the fire is under investigation. 

Source: http://www.wbtv.com/storv/25945615/fire-displaces-48-people-at-apartment- 
complex-near-unc-charlotte 

38. July 5, Reuters - (Texas) Six hurt in shooting and stampede at Houston Caribbean 
festival. Police are searching for a gunman that opened fire into a crowd at the Houston 
Caribbean Festival July 5, injuring four people. Two additional individuals were 
injured in a stampede for the exits that followed the incident. 

Source: http://www.reuters.com/article/2014/07/Q5/us-usa-shooting-texas- 
idUSKBNOFAOR 120 140705 

39. July 4, WSOC 9 Charlotte - (North Carolina) NWS: Microburst caused widespread 
Cherryville damage. A car wash in Cherryville was severely damaged July 3 when a 
microburst hit the area and tore bricks from the stalls of the structures. 

Source: http://www.wsoctv.com/news/weather/strong-storm-causes-damage- 
cherryville/ngYwt/ 

40. July 4, WLS 7 Chicago - (Illinois) Patio collapses into sinkhole in West Town. 
Firefighters evacuated a coach house and an apartment building in the West Town area 
of Chicago July 3 after a concrete patio connecting the two structures collapsed into a 
10-foot sinkhole that previously functioned as an underground walkway. No injuries 
were reported, and residents were relocated while officials inspected the patio. 

Source: http://abc7chicago.com/news/patio-collapses-8-10-feet-in-west-town/155614/ 

41. July 3, KTVK 3 Phoenix - (Arizona) Copper pipes stolen from Mesa church. Police 
are investigating after copper pipes were stolen from a bathroom at the Light in the 
Desert Baptist Church in Mesa while the church was closed June 30 - July 1. Several 
classrooms and a storeroom were damaged by water that gushed from the pipes. 

Source: http://www.azfamilv.com/news/Copper-pipes-stolen-from-Mesa-church- 
265740531.html 
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Dams Sector 

Nothing to report 
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